$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/debb647b-be5a-3ec9-8894-bc03d616d417.roa File: debb647b-be5a-3ec9-8894-bc03d616d417.roa (raw, json) Hash identifier: G6LLzy29/5MwV0SbmLUsILTHnNCENbqrdJkuFjRJo6c= Subject key identifier: 73:40:3D:94:84:6A:E8:30:4A:A9:AF:2E:69:D4:DF:D6:49:D4:9E:57 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584CF2BD0008E8267AD8D0662B80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/debb647b-be5a-3ec9-8894-bc03d616d417.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 12243 IP address blocks: 2001:470:3b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bd:00:08:e8:26:7a:d8:d0:66:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=fd2dd646-88f3-4f40-af5e-322a13b038ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:38:eb:42:4d:2e:e5:a7:4b:6f:24:34:5d: dc:77:4d:ee:5a:16:76:1b:ec:65:77:ee:4d:47:b9: f0:50:ac:25:b4:3c:74:4a:5c:da:5d:3d:67:2b:cf: 27:02:20:7f:b7:13:c4:9a:01:dd:ab:51:c2:ff:a9: 6f:b8:13:53:99:bd:25:9a:0c:06:af:dd:12:65:b3: 0e:a4:dd:54:d2:82:ae:95:eb:25:d4:29:54:59:74: 94:85:d3:61:67:02:fe:09:d0:20:ad:7f:f3:6d:21: 96:cd:c9:ce:78:ff:59:aa:da:86:25:53:ea:15:18: d1:59:80:62:38:2c:ed:7e:46:7a:45:b4:da:58:bc: 6a:27:3b:bd:f1:4e:ef:30:05:5a:d6:c6:fb:8e:c4: 3a:9d:67:90:5c:bb:f4:bf:f3:87:95:44:22:af:fd: 8e:b7:8a:ea:b4:73:85:ff:34:0f:8e:57:c0:ef:19: 7a:e3:2d:e7:6e:18:df:8d:43:d6:17:d2:0e:79:14: 5e:2a:b5:da:b8:bc:70:c9:5c:3d:55:d8:01:2b:46: 9f:39:a3:fe:ee:16:99:74:d9:47:ab:1c:9e:80:a4: cc:e2:49:4b:db:bf:28:f6:85:5b:c0:3e:3e:30:25: 63:13:77:77:51:c6:0f:cb:6a:1f:cc:19:1f:02:0b: 65:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:40:3D:94:84:6A:E8:30:4A:A9:AF:2E:69:D4:DF:D6:49:D4:9E:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/debb647b-be5a-3ec9-8894-bc03d616d417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:d6:e0:c4:b2:57:27:f3:92:33:3a:4f:f6:21:cf:32:b9:5e: 02:c6:3f:25:3e:f7:8f:53:b3:9e:c6:db:07:31:27:a1:cf:77: e0:49:63:f9:3d:16:97:15:37:17:b5:ca:e8:7e:63:60:8f:b1: de:58:68:39:c9:e8:d9:04:15:d2:de:b0:80:d9:76:c2:ca:3d: 30:a1:33:d1:81:48:6a:74:36:03:d1:5e:5d:9a:46:09:97:79: e1:63:01:7a:90:5e:1d:4a:3c:eb:60:b7:8c:78:3a:0c:59:d5: 70:4d:d6:9f:8f:88:74:bc:71:d9:25:91:80:02:a5:2d:72:01: 7e:67:4c:95:87:ef:97:f9:f2:3e:f5:31:ff:ea:bc:fa:e5:e0: d1:41:21:69:43:22:97:f6:84:02:b7:6c:6c:05:8b:96:fa:10: 2e:01:23:32:a6:90:a2:3c:29:69:ba:bc:94:36:1e:af:af:da: 58:06:e6:97:68:33:59:bc:86:b1:e9:e7:b8:85:0d:43:b0:cd: 41:f8:09:0b:d0:19:1f:9f:46:81:b0:a7:b0:c8:40:3b:b4:76: 26:de:21:ff:8c:4a:dd:69:97:0b:ff:f3:57:10:6a:d6:65:2f: b7:53:98:06:dd:ef:93:2b:d5:b3:63:e3:4f:8c:02:59:32:6f: 72:7e:1c:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzyvQAI6CZ62NBmK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZmQyZGQ2NDYtODhmMy00ZjQwLWFmNWUtMzIyYTEzYjAzOGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxso460JNLuWnS28kNF3cd03uWhZ2G+xld+5N R7nwUKwltDx0SlzaXT1nK88nAiB/txPEmgHdq1HC/6lvuBNTmb0lmgwGr90SZbMO pN1U0oKulesl1ClUWXSUhdNhZwL+CdAgrX/zbSGWzcnOeP9ZqtqGJVPqFRjRWYBi OCztfkZ6RbTaWLxqJzu98U7vMAVa1sb7jsQ6nWeQXLv0v/OHlUQir/2Ot4rqtHOF /zQPjlfA7xl64y3nbhjfjUPWF9IOeRReKrXauLxwyVw9VdgBK0afOaP+7haZdNlH qxyegKTM4klL278o9oVbwD4+MCVjE3d3UcYPy2ofzBkfAgtlxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHNAPZSEaugwSqmvLmnU39ZJ1J5XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGViYjY0N2ItYmU1YS0z ZWM5LTg4OTQtYmMwM2Q2MTZkNDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAO1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL3W4MSyVyfzkjM6T/YhzzK5XgLGPyU+949Ts57G2wcxJ6HPd+BJ Y/k9FpcVNxe1yuh+Y2CPsd5YaDnJ6NkEFdLesIDZdsLKPTChM9GBSGp0NgPRXl2a RgmXeeFjAXqQXh1KPOtgt4x4OgxZ1XBN1p+PiHS8cdklkYACpS1yAX5nTJWH75f5 8j71Mf/qvPrl4NFBIWlDIpf2hAK3bGwFi5b6EC4BIzKmkKI8KWm6vJQ2Hq+v2lgG 5pdoM1m8hrHp57iFDUOwzUH4CQvQGR+fRoGwp7DIQDu0dibeIf+MSt1plwv/81cQ atZlL7dTmAbd75Mr1bNj40+MAlkyb3J+HHM= -----END CERTIFICATE-----Generated at Mon Mar 2 00:51:37 2026 by rpki-client